«

Hello all

I have a situation that requires that a python script, that is
run from a webpage (via php exec()) must be run with root privileges.

The sysadmin already set the setuid bit on the script, but it
still fails when it tries to write to any file that only root has
write access to.

I read somewhere that any scripts that start with "#!" will no
honour the setuid bit...

I also tried os.setuid(0), with the setuid bit on, but this call
failed.

I am now out of ideas

Any sugestions?

Tiago

"Tiago Simões Batista" <> writes:

>
> Any sugestions?
>

http://www.faqs.org/faqs/unix-faq/fa...section-7.html

Tiago Simões Batista wrote:
> The sysadmin already set the setuid bit on the script, but it
> still fails when it tries to write to any file that only root has
> write access to.

use sudo.

On Thu, 24 Aug 2006 17:48:26 +0200
Patrick Useldinger <> wrote:

> Tiago Simões Batista wrote:
> > The sysadmin already set the setuid bit on the script, but it
> > still fails when it tries to write to any file that only root has
> > write access to.
>
> use sudo.
> --
> http://mail.python.org/mailman/listinfo/python-list
>

Thank you, both fot you and for Ove Svensson.

I was looking for a simpler way, that required as little intervention as possible from the main sysadmin. Given the situation I am facing, I will probably use sudo, it keeps things cleaner...

Again, thank you

Tiago

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)

iD8DBQFE7fRlcERmrF/iXCsRAoSGAKCXM2X6TaEXSE/IA4nS5SAUztc/ZgCghOKp
K02Z57Xa+l9RDU1hhnPjy8w=
=4BUk
-----END PGP SIGNATURE-----

[matthewtsmall]

Not exactly a python solution, but you could certainly call a c program with the SUID bit set from the python script to circumvent this. Just be careful that you limit the functionality of the c program to a specific task as it will have to be executable from the web account.